General
- Target 2026-07-31_c41b938f34fcacf582749857da89b5c9_amadey_elex_remcos_smoke-loader_vidar
- Size 2.4MB
- Sample260731-vbhy2awfph
- SHA256 4dc1f6b4ad392efebef87e6d285faf8fb84f5b550bb3ddd73e5f23a7fbaf6d3a
- MD5 c41b938f34fcacf582749857da89b5c9
- SHA1 e454b3da7e54f2988ddf62a338f0490d0477ead7
- SHA512 0398be9b65446512e42f728b35f58314a78ef93eeb33f8ba626611d667edfe738ded6a80cfb3f857f9cc46ff164bd803c4677870c814e1de28c0f7884dfb5826
- SSDEEP 24576:/ENJKEt6dq8hXj8R2vxW870KHOe5GqR6FokG81Cvz44sLy0aZJQ5Te6LHIGyunB:/ENwzIR257BRIqR6FoRvku04YLHIlu
- TLSH T1ECC55C10E7508025FAF352B59ABDD1B895297CF08B6890CFB1D876FE5A362E12D32347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_c41b938f34fcacf582749857da89b5c9_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_c41b938f34fcacf582749857da89b5c9_amadey_elex_remcos_smoke-loader_vidar.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_c41b938f34fcacf582749857da89b5c9_amadey_elex_remcos_smoke-loader_vidar
- Size 2.4MB
- SHA256 4dc1f6b4ad392efebef87e6d285faf8fb84f5b550bb3ddd73e5f23a7fbaf6d3a
- MD5 c41b938f34fcacf582749857da89b5c9
- SHA1 e454b3da7e54f2988ddf62a338f0490d0477ead7
- SHA512 0398be9b65446512e42f728b35f58314a78ef93eeb33f8ba626611d667edfe738ded6a80cfb3f857f9cc46ff164bd803c4677870c814e1de28c0f7884dfb5826
- SSDEEP 24576:/ENJKEt6dq8hXj8R2vxW870KHOe5GqR6FokG81Cvz44sLy0aZJQ5Te6LHIGyunB:/ENwzIR257BRIqR6FoRvku04YLHIlu
- TLSH T1ECC55C10E7508025FAF352B59ABDD1B895297CF08B6890CFB1D876FE5A362E12D32347
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables embedding registry key / value combination indicative of disabling Windows Defen
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory